CVE-2015-7256 Detail
Current Description
ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.
Source:
MITRE
View Analysis Description
Analysis Description
ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.
Source:
MITRE
Severity
CVSS 3.x Severity and Metrics:
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 Severity and Metrics:
Vector: (AV:N/AC:M/Au:N/C:P/I:N/A:N)
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because
they may have information that would be of interest to you. No inferences should be drawn on account of other sites
being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose.
NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further,
NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about
this page to nvd@nist.gov.
Weakness Enumeration
| CWE-ID |
CWE Name |
Source |
| CWE-310 |
Cryptographic Issues |
NIST
|
Known Affected Software Configurations
Switch to CPE 2.2
Configuration 1 ( hide ) Configuration 2 ( hide ) Configuration 3 ( hide ) Configuration 4 ( hide ) Configuration 5 ( hide ) Configuration 6 ( hide ) Configuration 7 ( hide ) Configuration 8 ( hide ) Configuration 9 ( hide ) Configuration 10 ( hide ) Configuration 11 ( hide ) Configuration 12 ( hide ) Configuration 13 ( hide ) Configuration 14 ( hide ) Configuration 15 ( hide ) Configuration 16 ( hide ) Configuration 17 ( hide ) Configuration 18 ( hide ) Configuration 19 ( hide ) Configuration 20 ( hide ) Configuration 21 ( hide ) Configuration 22 ( hide ) Configuration 23 ( hide ) Configuration 24 ( hide ) Configuration 25 ( hide )
Change History
2 change records found
- show changes
Initial Analysis -
10/11/2017 1:59:55 PM
| Action |
Type |
Old Value |
New Value |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:c1000z_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:c1000z:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:fr1000z_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:fr1000z:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:gs1900-24_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:gs1900-24:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:gs1900-8_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:gs1900-8:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:nwa1100-n_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:nwa1100-n:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:nwa1100-nh_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:nwa1100-nh:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:nwa1121-ni_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:nwa1121-ni:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:nwa1123-ac_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:nwa1123-ac:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:nwa1123-ni_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:nwa1123-ni:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:p-660hn-51_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:p-660hn-51:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:p-663hn-51_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:p-663hn-51:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:p8702n_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:p8702n:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:pmg5318-b20a_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:pmg5318-b20a:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:q1000_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:q1000:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:sbg3300-n000_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:sbg3300-n000:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:sbg3300-nb00_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:sbg3300-nb00:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:sbg3500-n000_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:sbg3500-n000:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:vmg1312-b10a_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:vmg1312-b10a:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:vmg1312-b30a_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:vmg1312-b30a:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:vmg1312-b30b_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:vmg1312-b30b:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:vmg4380-b10a_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:vmg4380-b10a:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:vmg8324-b10a_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:vmg8324-b10a:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:vmg8924-b10a_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:vmg8924-b10a:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:vmg8924-b30a_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:vmg8924-b30a:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:zyxel:vsg1435-b101_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:zyxel:vsg1435-b101:-:*:*:*:*:*:*:* |
| Added |
CVSS V2 |
|
(AV:N/AC:M/Au:N/C:P/I:N/A:N) |
| Added |
CVSS V3 |
|
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| Added |
CWE |
|
CWE-310 |
| Changed |
Reference Type |
http://www.kb.cert.org/vuls/id/566724 No Types Assigned |
http://www.kb.cert.org/vuls/id/566724 Third Party Advisory, US Government Resource |
| Changed |
Reference Type |
http://www.zyxel.com/support/announcement_SSH_private_key_and_certificate_vulnerability.shtml No Types Assigned |
http://www.zyxel.com/support/announcement_SSH_private_key_and_certificate_vulnerability.shtml Vendor Advisory |
CVE Modified by MITRE -
9/28/2017 9:34:48 PM
| Action |
Type |
Old Value |
New Value |
| Changed |
Description |
ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, NWA1123-NI Access Points, P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, VSG1435-B101 DSL CPEs, PMG5318-B20A GPON, SBG3300-N000, SBG3300-NB00, SBG3500-N000 Small Business Gateways, GS1900-8, GS1900-24 Switchs, and C1000Z, Q1000, FR1000Z, P8702N Project Models use non-unique X.509 certificates and SSH host keys. |
ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys. |
Quick Info
CVE Dictionary Entry:
CVE-2015-7256
NVD Published Date:
09/27/2017
NVD Last Modified:
10/11/2017
|